Added Vault feature support

This commit is contained in:
Alexey Pustovalov
2020-10-08 05:22:47 -04:00
26 changed files with 307 additions and 14 deletions

View File

@ -167,6 +167,18 @@ The varable is PHP ``max_input_time`` option. By default, value is `300`.
The variable is Zabbix frontend [definition](https://www.zabbix.com/documentation/4.2/manual/web_interface/definitions). String used as the name of the Zabbix frontend session cookie. By default, value is `zbx_sessionid`.
### `ZBX_DENY_GUI_ACCESS`
Enable (``true``) maintenance mode for Zabbix web-interface.
### `ZBX_GUI_ACCESS_IP_RANGE`
Array of IP addresses which are allowed for accessing to Zabbix web-interface during maintenance period.
### `ZBX_GUI_WARNING_MSG`
Information message about maintenance period for Zabbix web-interface.
### `ZBX_DB_ENCRYPTION`
The variable allows to activate encryption for connections to Zabbix database. Even if no other environment variables are specified, connections will be TLS-encrypted if `ZBX_DB_ENCRYPTION=true` specified. Available since 5.0.0. Disabled by default.
@ -195,6 +207,16 @@ The variable allows to specify a custom list of valid ciphers. The format of the
The variable allows to specify custom SSO settings in JSON format. Available since 5.0.0.
### Other variables
Additionally the image allows to specify many other environment variables listed below:
```
ZBX_VAULTDBPATH= # Available since 5.2.0
ZBX_VAULTURL=https://127.0.0.1:8200 # Available since 5.2.0
VAULT_TOKEN= # Available since 5.2.0
```
## Allowed volumes for the Zabbix web interface container
### ``/etc/ssl/nginx``